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Figure 1: Prior art chip application upload and execution 
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Figure 2: Dynamic upload, decryption and execution of protected chip 
application blocks (time = tl) 
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Figure 3: Dynamic upload, decryption and execution of protected chip 
application blocks (time = t2) 
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Figure 4: Dynamic upload, decryption and execution of protected chip 
application blocks (time = t3) 
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Figure 5: Example: Function call graph of four chip application functions 
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Figure 6: The compiler transitively incorporates variable dependencies into 
function calls, so that functions may call each other on chip. 
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Figure 7: Prior art individual compilation of host and chip apphcations, using 
separate compiler development tools 
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Figure 8: Protection of code; dual-step compilation - one for each processor 
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Figure 9: Simulation and debugging; compile directly for host 
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long Power (long base, long exp, long m) 
{ 

// QXDefault (Licenseld = 65534, ACR=1, Countdown^TRUE) 
long r; 

// QXBegin 
long p; 
short i ; 
//QXEnd 

r = 0; 

// QXBegin 
P = 1; 

// calculate base'^exp modulus m 
for (i = 1; i <= exp; ++i) { 
p = base * p % m; 

} 

returned = p; 
// QXEnd 

return r; 

} 

void ComputePower (long nBase, long nExponent, long *nResult) 

{ 

*nResult = Power(nBase, nExponent, 2100000000); 

} 



Figure 10: Code example: Tagged software application for multiple platforms 
before compilation 
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//QXAdded-> 
#include <string.h> 
#include "QXApi.h" 

extern const QX_UINT8 QXCode[]; 

#include <stdio.h> 

static void QXCheck (void) 
{ 

QX_RESUIiT r = QXGetError (); 
if (r != QX_OK) { 
char text [512] ; 

QXGetErrorText (r, text, sizeof text) ; 
printf ("ERROR %d: %s\n", r, text) ; 

} 

} 

//<-QXAdded 

long Power (long base, long exp, long m) 

{ 

// qxdef ault (Licenseld = 65534, ReaderOptions = SELECT_FIRST) 
long r; 

//QXProtected->65534 53689 

//6A382777AFACEEDEA9AF376D32A0BE9000F90 60F3 96B6606D77AADA791ED65 808 

//16FCAA84E087CD8563B3E469FB9F016D671B509C3620DDDE2B6A825B5E06A40 

//<-QXProtected 

r = 0; 

//QXProtected->65534 10264 

//EFFDA14B76859B95EEDB162D76560F1D63A003D3 7F4B4 310B2 333ADC97470C01F 

//75FA21D9BB08DBAAEC5A09712E6165DFBF564F543CB34F05272C8CC6A292FA73D 

//EA632F084FAA46012D6A70B3EE837779F68C3DF99FF4FB18832AE1FFE36C6147B 

//D90B5D195DEBB8478A7D1B4315AE70985B9EA68FAB5735F5DCA1AOF72F3755086 

//A2 81FA6AB3C3BEAC8D415470DBB832B0A2F4B3D5DDE473C9241ABA319A064AC78 

//F3A3 1A36E27 

/ / < -QXProtec ted 

//QXAdded-> 

{ 

char QXBuffer [2 0] / 

memcpy (QXBuffer + 0, & base, 4) ; 

memcpy (QXBuffer +4, & exp, 4) ; 

memcpy (QXBuffer +8, & m, 4); 

memcpy (QXBuffer + 12, & returned, 4) ; 

QXExecutePtr (65534, 512, QXCode, 0, QXBuffer, 16, QXBuffer, 4) ; 
memcpy (& r, QXBuffer + 0, 4); 

} 

QXCheck () ; 
//<-QXAdded 



return r; 

} 
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void ComputePower ( long nBase , long nExponent, long *nResult) 
♦nResult = Power(nBase, nExponent, 2100000000); 

} 

i 

//QXAdded-> 

extern const QX_UINT8 QXCode [] = { 

0x20, 0x56, 0x65,0x72,0x73, 0x69, 0x6 F, 0x6 E, 0x20, 0x33, 0x2 E , 0x32 , 0x2 D , 
0x3E, 0x4C, 0x09, OxlF, 0x3D, 0x01 , 0x00 , 0x4 8 , 0x00 , 0x20 , 0x00, 0x2A, 0xB6, 
OxAD, 0x2 A, 0x79, OxEl, 0x94 , OxlA, OxOA, 0x4 9, 0x05, OxAB, 0x6D, 0x46, 0xD2 , 
OxCF, 0xB3 , OxlD, 0x7 9, 0x2 6 , OxOD, OxBB, 0x76 , OxEE , OxCD, 0x3 E, 0xA7 , OxAl , 
0x4D, 0x21, 0x79, OxSC, 0x00 , 0x00, 0x3C, 0x0 0, OxOC, 0x04 , 0x00, 0x48, 0x00, 
0x59, 0xA5, OxFB, 0x2 9, 0x64 , 0xE6, 0x34, 0x62, OxAE, 0x95 , 0xC5 , 0x69, 0x11, 
0x66, 0x25, 0x09, 0x94 , 0x63 , OxCA, 0x80, OxlB, 0x09, OxDD, 0x3D, 0xB2, OxlB, 
0x4C, 0x97 , OxAE , 0x48 , 0x68 , 0xB7 , OxAD, 0x8C, 0x25 , 0x4A, 0xA2 , 0x64 , 0x8F, 
0x16 , 0x86 , 0x5D, 0x35 , 0x01 , 0x2 3 , OxDF, 0x32 , 0x80 , Ox4C, OxA9 , 0x52 , OxlC, 
0x2 0, 0x76 , OxDl, OxEB, 0xA3 , 0x5B, 0x5 7, 0x23 , 0x3D, 0x00, 0x2 9, OxBO , 0x08, 
0x7^ , OxFC , 0x7D , 0xD2 , 0x8B , OxFE , 0x7 1 , 0x0 0 , 0x0 0 , 0x0 0,0x00, 0x0 0 , 0x0 0 , 
Ox3C, 

}; 

//<-QXAdded 



Figure 11: Code example: Software application after compilation, containing 
encrypted (virtual) machine code for chip platform embedded as source code hbrary 
fimction calls. 
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Initial licenses stored on token A: 
Issuer Transport License: Kitl 
Vendor Transport License: Kvtl 
License 



Initial licenses stored on token B: 
Issuer Transport License: Kitl 
Vendor Transport License: Kvt 



1 . Generate and store transport code and timestamp' 

I - Desf ; ■■.ii^p; • t'^$ks€tid^ :L%^ 

NoOf Licenses I Capabilities I ITiild I VTLId I- Transpo.rtCode) } Ki^L 



3 . Decrypt transport code, regenerate and compare hash value 

4 . Generate random session key Ks 

5 , If operation is Move then decrement or delete License 
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7 . Verily transport code and delete if it matches! 



8. Store License, i 



Figure 12: Cryptographic protocol for the transfer of a hcense from platform A to B, 
which prevents duplication of license. 



